Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32332d3233203d3e203238353934.roa
File:                     3230302e3231382e3234382e302f32332d3233203d3e203238353934.roa (raw, json)
Hash identifier:          Ici2NKETLh8eabFOG3lur+aVOoTDm73/TJ9LowVdpZM=
Subject key identifier:   DE:D2:1E:A8:0A:20:24:59:57:F4:1B:F8:60:96:E0:A7:E6:BE:EC:48
Certificate issuer:       /CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
Certificate serial:       10D1EABFC83EB2239DBF4EE1E67760757C6B2140
Authority key identifier: 9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32332d3233203d3e203238353934.roa
Signing time:             Thu 06 Mar 2025 01:39:17 +0000
ROA not before:           Thu 06 Mar 2025 01:34:17 +0000
ROA not after:            Thu 05 Mar 2026 01:39:17 +0000
asID:                     28594
IP address blocks:        200.218.248.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl
                          rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.mft
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.crl
                          rsync://rpki-repo.registro.br/repo/nicbr_repo/1/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.mft
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/605432E9E1B05A7E6C208B2946FDC9C967CA8A4B.cer
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.crl
                          rsync://repository.lacnic.net/rpki/lacnic/A1531B24BF50C461C7F574CD65267A8B0DC325DAAA10075F67165B98C4F4EFC3/0/05BAF2939E37DDDE1793A803162A35594ACBB405.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/05BAF2939E37DDDE1793A803162A35594ACBB405.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Tue 29 Apr 2025 02:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:d1:ea:bf:c8:3e:b2:23:9d:bf:4e:e1:e6:77:60:75:7c:6b:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9C0B0F9C917C39C4E0A392991B6A86E0D4917406
        Validity
            Not Before: Mar  6 01:34:17 2025 GMT
            Not After : Mar  5 01:39:17 2026 GMT
        Subject: CN=DED21EA80A20245957F41BF86096E0A7E6BEEC48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:f6:1e:84:5d:91:fe:1a:bc:0a:e2:1a:75:
                    f4:a0:4f:aa:f7:9d:f5:40:5a:49:7a:0f:03:6a:70:
                    3b:94:f5:00:26:e9:c9:bb:97:fa:4c:35:03:2e:a6:
                    6e:64:3b:48:86:1b:30:9c:c1:9a:92:08:66:16:84:
                    f8:7e:e0:af:08:36:b4:82:e7:9a:b3:14:5b:38:e5:
                    63:9e:80:ee:2e:9f:ed:72:14:08:2b:e8:42:85:b7:
                    e0:5e:f7:c0:2a:e1:9c:1b:18:6b:a5:93:cc:5a:88:
                    3c:38:68:fc:f4:cb:46:95:6a:d2:85:27:ad:64:b2:
                    db:19:8f:99:1d:b9:20:84:4e:00:2b:45:51:c4:f2:
                    47:24:e1:4d:7f:eb:a9:d2:8f:ed:55:7a:a3:34:f5:
                    89:3d:a0:c6:e1:93:bf:30:fb:0a:6e:98:eb:26:92:
                    6b:e4:f4:e8:b2:4f:3d:28:45:bd:d7:2a:58:e4:8c:
                    da:d1:f4:5e:21:bd:84:84:bf:53:dc:94:58:ba:f5:
                    7e:7d:b7:15:8b:8f:bd:9d:e9:c1:72:41:c8:a4:fa:
                    75:22:e1:88:28:eb:1a:50:23:33:c3:0d:90:05:f3:
                    02:7e:41:ac:62:71:74:bb:ce:25:e2:4e:e4:51:0f:
                    c5:7a:7f:3d:d4:bf:fa:94:bf:3f:42:fd:bb:d3:f1:
                    79:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:D2:1E:A8:0A:20:24:59:57:F4:1B:F8:60:96:E0:A7:E6:BE:EC:48
            X509v3 Authority Key Identifier:
                keyid:9C:0B:0F:9C:91:7C:39:C4:E0:A3:92:99:1B:6A:86:E0:D4:91:74:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9C0B0F9C917C39C4E0A392991B6A86E0D4917406.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/53jjjTDfUAeRCqRwYJ6FMr9BoyyucU8ciwnPK4MhLywz/2/3230302e3231382e3234382e302f32332d3233203d3e203238353934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.218.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:be:e9:7e:9b:11:d2:09:d8:ff:c7:75:f9:6c:33:e3:08:0c:
         b2:58:7a:39:e5:52:8e:05:6b:fc:8c:d7:b9:02:e1:18:64:e0:
         02:94:0f:a2:08:c4:fc:ed:91:b0:dc:b7:3a:f2:bc:0e:72:80:
         15:e9:cb:8c:c9:74:3f:b8:14:df:58:b5:a1:fa:52:50:2e:c3:
         18:fc:24:27:5b:6b:4a:cd:39:b4:30:56:7d:fb:2f:6b:a3:2f:
         98:a9:26:2c:86:09:b2:c0:f0:a5:0b:0d:7d:49:2d:37:2b:29:
         13:28:31:db:1c:44:d0:ad:2d:f2:30:fc:8b:93:1b:f4:80:03:
         7d:55:51:f6:19:91:41:ab:81:a3:cb:0e:66:2b:98:c9:ba:4d:
         9c:42:3d:ab:f2:54:29:db:8a:da:3f:d1:78:03:b2:22:58:cf:
         0a:3e:08:b4:61:01:3a:be:b7:82:c2:2e:39:eb:5b:4f:7d:77:
         c5:ff:18:17:2f:c6:3f:a0:3c:f4:eb:d8:27:c8:0e:29:c9:62:
         7f:09:a7:54:ae:a8:f9:81:e6:d2:2f:d1:6c:73:ba:67:64:f6:
         39:3c:8c:a6:56:fe:09:49:9d:91:a1:49:94:d4:93:c0:24:87:
         c9:c7:2f:df:62:50:61:a1:36:ca:f2:ff:15:e8:12:56:83:cc:
         a4:24:17:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 10:49:18 2025 by rpki-client on console.sobornost.net